maintained actions #2515

vamshi-stepsecurity · 2025-04-29T13:54:08Z

For now i have hardcoded the maintained actions object in a json file and loading it .
I am creating map of original action to maintained action and using it for replacing the original actions .. (plan is to maintain a map object in file or something and update it whenever we modify the original maintained actions object)
using the public apis to get the latest version of our actions

please share your thoughts

step-security-bot

Code Review Skipped

StepSecurity AI-CodeWise is designed to handle a maximum of 10 file changes per pull request. To utilize its capabilities, please create a new pull request containing no more than 10 files

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find the comments helpful, give them a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.

varunsh-coder · 2025-04-30T17:10:21Z

remediation/workflow/maintainedactions/getlatestrelease.go

+
+func GetLatestRelease(ownerRepo string) (string, error) {
+	// Build the URL dynamically and add `/actions` at the end
+	url := fmt.Sprintf("https://api.github.com/repos/%s/releases/latest", ownerRepo)


https://github.com/step-security/secure-repo/blob/main/remediation/workflow/pin/pinactions.go#L63-L73

step-security-bot

Code Review Skipped

StepSecurity AI-CodeWise is designed to handle a maximum of 10 file changes per pull request. To utilize its capabilities, please create a new pull request containing no more than 10 files

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find the comments helpful, give them a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.

step-security-bot

Code Review Skipped

StepSecurity AI-CodeWise is designed to handle a maximum of 10 file changes per pull request. To utilize its capabilities, please create a new pull request containing no more than 10 files

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find the comments helpful, give them a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.

varunsh-coder · 2025-05-06T15:09:28Z

remediation/workflow/maintainedactions/maintainedActions.go

+}
+
+// LoadMaintainedActions loads the maintained actions from the JSON file
+func LoadMaintainedActions() (map[string]string, error) {


the plan is to get this list from the API now, right?

varunsh-coder · 2025-05-08T06:24:45Z

@shubham-stepsecurity can you please review this PR?

step-security-bot

Code Review Skipped

StepSecurity AI-CodeWise is designed to handle a maximum of 10 file changes per pull request. To utilize its capabilities, please create a new pull request containing no more than 10 files

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find the comments helpful, give them a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.

varunsh-coder · 2025-05-13T16:54:14Z

remediation/workflow/secureworkflow.go

 	ignoreMissingKBs := false
-	enableLogging := false
-	exemptedActions, pinToImmutable := []string{}, false
+  enableLogging := false


indentation

varunsh-coder · 2025-05-13T16:55:21Z

remediation/workflow/secureworkflow.go

-	enableLogging := false
-	exemptedActions, pinToImmutable := []string{}, false
+  enableLogging := false
+	exemptedActions, pinToImmutable, customerMaintainedActions := []string{}, false, map[string]string{}


customerMaintainedActions should not use word customer

step-security-bot

Code Review Skipped

StepSecurity AI-CodeWise is designed to handle a maximum of 10 file changes per pull request. To utilize its capabilities, please create a new pull request containing no more than 10 files

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find the comments helpful, give them a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.

maintained actions

f4b2c48

vamshi-stepsecurity changed the base branch from main to int April 29, 2025 13:54

del uneccessary stuff

28d68b9

step-security-bot reviewed Apr 29, 2025

View reviewed changes

varunsh-coder reviewed Apr 30, 2025

View reviewed changes

add change for tag

703e794

step-security-bot reviewed May 1, 2025

View reviewed changes

add changes for exempted actions

fc469a1

step-security-bot reviewed May 2, 2025

View reviewed changes

varunsh-coder reviewed May 6, 2025

View reviewed changes

Balijepalli Vamshi Krishna and others added 2 commits May 12, 2025 22:32

add actionMap as a argument to secure workflow

e9bfbb3

Merge branch 'int' into stepsecurityActions

59f33da

step-security-bot reviewed May 13, 2025

View reviewed changes

vamshi-stepsecurity requested a review from varunsh-coder May 13, 2025 10:07

varunsh-coder reviewed May 13, 2025

View reviewed changes

add name changes to variables

b1012ad

step-security-bot reviewed May 13, 2025

View reviewed changes

varunsh-coder merged commit 6d21e4c into step-security:int May 14, 2025
2 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

maintained actions #2515

maintained actions #2515

Uh oh!

vamshi-stepsecurity commented Apr 29, 2025 •

edited

Loading

Uh oh!

step-security-bot left a comment

Uh oh!

varunsh-coder Apr 30, 2025

Uh oh!

step-security-bot left a comment

Uh oh!

step-security-bot left a comment

Uh oh!

varunsh-coder May 6, 2025

Uh oh!

vamshi-stepsecurity May 6, 2025

Uh oh!

varunsh-coder commented May 8, 2025

Uh oh!

step-security-bot left a comment

Uh oh!

varunsh-coder May 13, 2025

Uh oh!

varunsh-coder May 13, 2025

Uh oh!

step-security-bot left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

maintained actions #2515

maintained actions #2515

Uh oh!

Conversation

vamshi-stepsecurity commented Apr 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

step-security-bot left a comment

Choose a reason for hiding this comment

Code Review Skipped

Feedback

Uh oh!

varunsh-coder Apr 30, 2025

Choose a reason for hiding this comment

Uh oh!

step-security-bot left a comment

Choose a reason for hiding this comment

Code Review Skipped

Feedback

Uh oh!

step-security-bot left a comment

Choose a reason for hiding this comment

Code Review Skipped

Feedback

Uh oh!

varunsh-coder May 6, 2025

Choose a reason for hiding this comment

Uh oh!

vamshi-stepsecurity May 6, 2025

Choose a reason for hiding this comment

Uh oh!

varunsh-coder commented May 8, 2025

Uh oh!

step-security-bot left a comment

Choose a reason for hiding this comment

Code Review Skipped

Feedback

Uh oh!

varunsh-coder May 13, 2025

Choose a reason for hiding this comment

Uh oh!

varunsh-coder May 13, 2025

Choose a reason for hiding this comment

Uh oh!

step-security-bot left a comment

Choose a reason for hiding this comment

Code Review Skipped

Feedback

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

vamshi-stepsecurity commented Apr 29, 2025 •

edited

Loading